feat(help): enforce owner-aware high-risk contexts

2026-08-24 11:48:23 +02:00
parent d2e491348d
commit f98cf9ced8
12 changed files with 305 additions and 222 deletions
@@ -58,6 +58,17 @@ than adding custom `F1` listeners:
  headed pages. `WorkspaceLayout` owns the full-canvas workspace scope and its
  labelled primary/content panes; pages inside it use `PageLayout` in
  `workspace` mode and retain their own route-level help identity.
+- `PasswordField` passes its owner context and module through reveal/generate
+  actions and the shared generator dialog. Credential consumers must supply an
+  exact owner context; the generic component does not own credential policy.
+
+High-risk controls use one of the source-inventory risk classes (`authority`,
+`credential`, `disclosure`, `encryption`, `external-effect`, `irreversible`,
+`policy`, or `retention`) and require exact F1 help. The extractor infers
+obvious cases conservatively; components may declare `data-help-risk`
+explicitly or mark a reviewed ordinary control with
+`data-help-risk-reviewed="standard"`. The strict workspace gate rejects new
+unresolved high-risk debt.

 Module routes, public routes, settings sections, and administration sections
 may also declare `helpContextId` and `helpTopicId`. Each module must keep a